Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
7xsyz7.rar
Resource
win11-20240419-en
Behavioral task
behavioral2
Sample
7xsyz7/Defender_Settings.vbs
Resource
win11-20240419-en
Behavioral task
behavioral3
Sample
7xsyz7/ReadMe.txt
Resource
win11-20240426-en
Behavioral task
behavioral4
Sample
7xsyz7/dControl.exe
Resource
win11-20240426-en
Behavioral task
behavioral5
Sample
out.exe
Resource
win11-20240426-en
Behavioral task
behavioral6
Sample
7xsyz7/dControl.ini
Resource
win11-20240426-en
Target
7xsyz7.rar
Size
446KB
MD5
f43fed1728c3f42404be3bbf096d645a
SHA1
d3beaef94ab3f594be8d2afccf01a1dfd29f4b85
SHA256
76ac23bd8fd1e54ec6d0bca29f38acd893fe399cdf72dc16294ac7606593edb1
SHA512
59437e3e247019a1ca29a7ffca0fd0d6b996c2df1d13a8e336490862ece5fbd4ba76a7969aa80b92217fd990b9feb2ab4c7e8223a856113c95935f5f82ca4dab
SSDEEP
12288:I3QdVHvoDuJugypq23Z4QPYxQpIn/oRC6ygNS1OJJRUX:I3+5AqJu1I2p4QgxQ6/2bNSeO
resource | yara_rule |
---|---|
static1/unpack001/7xsyz7/dControl.exe | upx |
AutoIT scripts compiled to PE executables.
resource | yara_rule |
---|---|
static1/unpack002/out.upx | autoit_exe |
Checks for missing Authenticode signature.
resource |
---|
unpack002/out.upx |
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ